[ 37.102258] kauditd_printk_skb: 9 callbacks suppressed [ 37.102265] audit: type=1800 audit(1561546578.717:33): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 37.132402] audit: type=1800 audit(1561546578.717:34): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 42.311415] random: sshd: uninitialized urandom read (32 bytes read) [ 42.780220] audit: type=1400 audit(1561546584.387:35): avc: denied { map } for pid=7124 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 42.836700] random: sshd: uninitialized urandom read (32 bytes read) [ 43.544671] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.222' (ECDSA) to the list of known hosts. [ 49.217775] random: sshd: uninitialized urandom read (32 bytes read) 2019/06/26 10:56:31 fuzzer started [ 49.409202] audit: type=1400 audit(1561546591.017:36): avc: denied { map } for pid=7133 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 51.517426] random: cc1: uninitialized urandom read (8 bytes read) 2019/06/26 10:56:34 dialing manager at 10.128.0.105:34703 2019/06/26 10:56:34 syscalls: 2444 2019/06/26 10:56:34 code coverage: enabled 2019/06/26 10:56:34 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/06/26 10:56:34 extra coverage: extra coverage is not supported by the kernel 2019/06/26 10:56:34 setuid sandbox: enabled 2019/06/26 10:56:34 namespace sandbox: enabled 2019/06/26 10:56:34 Android sandbox: /sys/fs/selinux/policy does not exist 2019/06/26 10:56:34 fault injection: enabled 2019/06/26 10:56:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/06/26 10:56:34 net packet injection: enabled 2019/06/26 10:56:34 net device setup: enabled [ 53.760497] random: crng init done 10:58:18 executing program 0: 10:58:18 executing program 5: 10:58:18 executing program 1: 10:58:18 executing program 2: 10:58:18 executing program 3: 10:58:18 executing program 4: [ 156.423385] audit: type=1400 audit(1561546698.037:37): avc: denied { map } for pid=7133 comm="syz-fuzzer" path="/root/syzkaller-shm246233546" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 156.458888] audit: type=1400 audit(1561546698.067:38): avc: denied { map } for pid=7150 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13820 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 157.470210] IPVS: ftp: loaded support on port[0] = 21 [ 157.795859] IPVS: ftp: loaded support on port[0] = 21 [ 157.812350] chnl_net:caif_netlink_parms(): no params data found [ 157.870745] IPVS: ftp: loaded support on port[0] = 21 [ 157.891370] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.898182] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.905434] device bridge_slave_0 entered promiscuous mode [ 157.915001] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.921468] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.928348] device bridge_slave_1 entered promiscuous mode [ 157.953267] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.982076] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.017131] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.024944] team0: Port device team_slave_0 added [ 158.033204] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.040583] team0: Port device team_slave_1 added [ 158.048793] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.084245] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.101760] IPVS: ftp: loaded support on port[0] = 21 [ 158.152342] device hsr_slave_0 entered promiscuous mode [ 158.190344] device hsr_slave_1 entered promiscuous mode [ 158.241451] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 158.251023] chnl_net:caif_netlink_parms(): no params data found [ 158.272330] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 158.342779] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.349248] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.356473] device bridge_slave_0 entered promiscuous mode [ 158.385580] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.392396] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.399538] device bridge_slave_1 entered promiscuous mode [ 158.425561] chnl_net:caif_netlink_parms(): no params data found [ 158.443409] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 158.453079] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.461555] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.467933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.475048] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.481401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.491001] IPVS: ftp: loaded support on port[0] = 21 [ 158.564545] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.571938] team0: Port device team_slave_0 added [ 158.601483] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.608650] team0: Port device team_slave_1 added [ 158.616397] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.626932] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.648871] chnl_net:caif_netlink_parms(): no params data found [ 158.713308] device hsr_slave_0 entered promiscuous mode [ 158.750397] device hsr_slave_1 entered promiscuous mode [ 158.794826] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 158.807113] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 158.818298] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.825299] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.832493] device bridge_slave_0 entered promiscuous mode [ 158.839604] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.846480] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.853611] device bridge_slave_1 entered promiscuous mode [ 158.869301] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.876682] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.897919] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 158.918535] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 158.946356] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.979124] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.986605] team0: Port device team_slave_0 added [ 158.994001] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 159.004372] team0: Port device team_slave_1 added [ 159.010002] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.023574] IPVS: ftp: loaded support on port[0] = 21 [ 159.037380] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.046802] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.054315] device bridge_slave_0 entered promiscuous mode [ 159.062625] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.068998] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.076669] device bridge_slave_1 entered promiscuous mode [ 159.089088] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.139068] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.223500] device hsr_slave_0 entered promiscuous mode [ 159.260425] device hsr_slave_1 entered promiscuous mode [ 159.302671] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 159.341203] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.367795] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 159.375916] team0: Port device team_slave_0 added [ 159.383957] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 159.391288] team0: Port device team_slave_1 added [ 159.396770] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 159.414013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.423293] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.431131] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.471288] chnl_net:caif_netlink_parms(): no params data found [ 159.493534] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.542666] device hsr_slave_0 entered promiscuous mode [ 159.590398] device hsr_slave_1 entered promiscuous mode [ 159.636319] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 159.646679] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.658675] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 159.692351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.698483] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.705885] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.713204] device bridge_slave_0 entered promiscuous mode [ 159.719871] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.726459] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.733861] device bridge_slave_1 entered promiscuous mode [ 159.758741] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.767851] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 159.777381] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 159.783638] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.800414] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.811655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.819296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.827670] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.836510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.872807] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.882941] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 159.889575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.898736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.909752] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.916162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.927932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.935032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.944428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.966037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.974799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.982741] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.989108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.997423] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 160.005098] team0: Port device team_slave_0 added [ 160.011114] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 160.018429] team0: Port device team_slave_1 added [ 160.050807] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 160.057176] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.064500] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 160.074665] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 160.098951] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.109092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.118066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 160.128277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 160.153234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.161296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.169039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.176977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.184567] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.191068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.198145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.206384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.214257] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.220646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.227847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.242728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.293971] device hsr_slave_0 entered promiscuous mode [ 160.330462] device hsr_slave_1 entered promiscuous mode [ 160.393974] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 160.403640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.414260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.424522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.430940] chnl_net:caif_netlink_parms(): no params data found [ 160.441414] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 160.451025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 160.458486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.468361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.476481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.484324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.495565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 160.518043] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 160.526965] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.535317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.543462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.551726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.559341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.567378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.582874] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 160.591298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 160.601395] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.611828] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 160.618099] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.626914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.635079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.643092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.649912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.675255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 160.683353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 160.693847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 160.702405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 160.717323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.725302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.732936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.740753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.748180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.755829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.763238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.771097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.778637] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.785036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.799852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.810627] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 160.826441] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 160.833763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.843406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.851218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.858829] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.865239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.872549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.880988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.891898] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.904543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.917160] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.925394] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.933895] device bridge_slave_0 entered promiscuous mode [ 160.951251] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 160.958499] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.967148] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.975813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.985852] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.995121] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.002571] device bridge_slave_1 entered promiscuous mode [ 161.016593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.023891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.031079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.041924] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 161.048001] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.057783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.074646] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.084695] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 161.092381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.108948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.115879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.125087] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 161.133777] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 161.145299] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 161.152256] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.162815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 161.170661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.178369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.186303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.194375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.202401] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.208831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.215897] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.222984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.232410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.240276] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 161.257782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.266293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 161.276526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 161.290707] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 161.301412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 161.316579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.325847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.334003] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.340424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.347249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.355476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.363458] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.369928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.377109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.384981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.392892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.400728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.410683] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 161.418749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.429325] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 161.441142] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 161.448630] team0: Port device team_slave_0 added [ 161.460882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.468082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.476068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.484070] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.490450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.497609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.505445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.513115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.523348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.532978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 161.542719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 161.551943] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 161.563454] team0: Port device team_slave_1 added [ 161.569089] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 161.578439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.587335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.595589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 10:58:23 executing program 1: [ 161.612526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.624568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.634240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.648340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.659988] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready 10:58:23 executing program 1: request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) [ 161.667084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.677534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 161.688670] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 161.699257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.710995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 10:58:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000001000000000000180000009bb37312f8088ef58e0d42b5195716099533b19e5b79bf4e"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x12) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 161.718599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.730309] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.739434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 161.756383] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 161.766039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 161.788384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.800805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.808741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 10:58:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000180)="ff", 0x1, 0x0, 0x0, 0x0) [ 161.816923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.825138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.836397] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 10:58:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x16c, 0x244) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @dev}}, 0x0, 0x200000000000025, 0x2, "a77760f5a7645bc43c241d69912d030c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a939a7a939ebddfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[], 0xffffffdf) 10:58:23 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) clone(0x3fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) [ 161.913320] device hsr_slave_0 entered promiscuous mode [ 161.945615] device hsr_slave_1 entered promiscuous mode 10:58:23 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="b70000000000f357f00a0000000000009500000010060000f1a756f704afe1428a40455ef2a2ff9967794b1a895f10"], 0x0, 0x1, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 161.981573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.988882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.006002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.022154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 162.041579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.057836] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 162.065951] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 162.088341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.100992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.117562] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 162.134380] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 162.151560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.159450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.174042] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 162.181355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.190136] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 162.217800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.234371] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 162.246051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.278984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.298815] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 162.308513] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 162.315430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.323231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.334725] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 162.342982] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.355377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.364518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.372659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.380729] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.387147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.394665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.406770] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.414637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.423352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.431426] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.437860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.449050] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 162.462576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 10:58:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r1, 0x0, 0x1f, 0x0, &(0x7f0000000080)) 10:58:24 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20000000000001, 0x3, &(0x7f0000000340)=@framed={{0xffffff85, 0x0, 0x0, 0x2, 0x0, 0xffffffd4}}, 0x0, 0x10000000000001, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 162.486485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 162.552887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.578337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.608930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.619291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.628261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.638020] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.651550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 162.658599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.667085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.675113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.682897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.701520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 162.716128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.729614] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 162.735966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.743572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.751909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.766339] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 162.783061] 8021q: adding VLAN 0 to HW filter on device batadv0 10:58:25 executing program 2: r0 = socket$inet(0x10, 0x2000000000000003, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00\x00\xfe\xff\x00r\xed\x02\x00', @ifru_flags}) 10:58:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r0, 0x0, 0x1f, 0x0, &(0x7f0000000080)) 10:58:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@rthdrdstopts={{0x10}}], 0x18}, 0x0) 10:58:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x13, &(0x7f0000001440), 0x4) 10:58:25 executing program 5: syz_extract_tcp_res$synack(0x0, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x278e214d) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 10:58:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x16c, 0x244) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @dev}}, 0x0, 0x200000000000025, 0x2, "a77760f5a7645bc43c241d69912d030c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a939a7a939ebddfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[], 0xffffffdf) 10:58:25 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000003fe0)) 10:58:25 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x5) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) dup2(r1, r2) tkill(r0, 0x15) 10:58:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x3, 0x7f) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x1b1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000000000ba0080080002007f196be0", 0x24) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@rand_addr, @local}, 0x8) 10:58:25 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, 0x0) 10:58:25 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000240)='./file0\x00', 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) 10:58:25 executing program 0: [ 164.160859] protocol 88fb is buggy, dev hsr_slave_0 [ 164.166147] protocol 88fb is buggy, dev hsr_slave_1 10:58:25 executing program 4: 10:58:25 executing program 0: 10:58:25 executing program 2: 10:58:25 executing program 4: [ 164.640192] protocol 88fb is buggy, dev hsr_slave_0 [ 164.645333] protocol 88fb is buggy, dev hsr_slave_1 10:58:26 executing program 5: syz_extract_tcp_res$synack(0x0, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x278e214d) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 10:58:26 executing program 1: 10:58:26 executing program 0: 10:58:26 executing program 2: 10:58:26 executing program 4: 10:58:26 executing program 0: 10:58:26 executing program 3: 10:58:26 executing program 2: 10:58:26 executing program 4: 10:58:26 executing program 1: 10:58:26 executing program 0: 10:58:26 executing program 2: 10:58:27 executing program 5: 10:58:27 executing program 4: 10:58:27 executing program 3: 10:58:27 executing program 0: 10:58:27 executing program 1: 10:58:27 executing program 2: 10:58:27 executing program 4: 10:58:27 executing program 1: 10:58:27 executing program 2: 10:58:27 executing program 0: 10:58:27 executing program 5: 10:58:27 executing program 3: 10:58:27 executing program 4: 10:58:27 executing program 2: 10:58:27 executing program 1: 10:58:27 executing program 0: 10:58:27 executing program 5: 10:58:27 executing program 4: 10:58:27 executing program 3: 10:58:27 executing program 1: 10:58:27 executing program 2: 10:58:27 executing program 4: 10:58:27 executing program 3: 10:58:27 executing program 0: 10:58:27 executing program 5: 10:58:27 executing program 1: 10:58:27 executing program 2: 10:58:27 executing program 4: 10:58:27 executing program 3: 10:58:27 executing program 0: 10:58:27 executing program 5: 10:58:27 executing program 0: 10:58:27 executing program 4: 10:58:27 executing program 5: 10:58:27 executing program 2: 10:58:27 executing program 3: 10:58:27 executing program 1: 10:58:27 executing program 5: 10:58:27 executing program 4: 10:58:27 executing program 2: 10:58:27 executing program 3: 10:58:27 executing program 0: 10:58:27 executing program 1: 10:58:27 executing program 5: 10:58:28 executing program 2: 10:58:28 executing program 4: 10:58:28 executing program 3: 10:58:28 executing program 1: 10:58:28 executing program 0: 10:58:28 executing program 5: 10:58:28 executing program 2: 10:58:28 executing program 0: 10:58:28 executing program 1: 10:58:28 executing program 5: 10:58:28 executing program 3: 10:58:28 executing program 4: 10:58:28 executing program 2: 10:58:28 executing program 0: 10:58:28 executing program 3: 10:58:28 executing program 1: 10:58:28 executing program 4: 10:58:28 executing program 5: 10:58:28 executing program 0: 10:58:28 executing program 2: 10:58:28 executing program 3: 10:58:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1000, 0x4800) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x71, &(0x7f0000000100)={&(0x7f0000000200)={0x1, 0x33, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@nested={0x0, 0x17, [@generic="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", @generic="50b76bcd5048885e33fc24c4856e40ec4ffd4225933a0216555112c2eb8042466834efc72f766a99c3bf3ab6dc8c15565e13821fae1a1a260491aae47085946c40dd747edcece13ceb5cfff794997cffc2fc511c382fccb51439d7663432afffcd2df3db913dacf055805a64c1a28f348a3922996bd2f97949bf80d68b638f55c57b0ac6aaa438784b876acb9a0b4b2b52373e1e671984", @generic="1b5e2aa2c60531979982a37ce2e49b6d540b1e9867905b610915ae", @typed={0x0, 0x23, @str='/dev/bus/usb/00#/00#\x00'}, @generic="a8ca44bcce5aafef9192246946f70da16c6568bba046be337dbd44c821e677220aea51808227ae8854a7d436bd7855efb840c68feca985fad1afebc96546a93622a9aad16abeb962b5784502abaae1e31515d9267a23e517a18fff152d7f06cca24cd921f5e78e7a87b40cfeac53b20895dbd2d29c45c407cfae95b01b9aea96f6d036fd6847e6aa609741589f64a2160819d187de57546f96a0ddae1872127af803acf0a3d448a8ed8192dd020107c70c31e65e0e6e9d8278b5d3cbf89b3305e4433bfbc1af01f924b52fa6f80f71e5d1", @typed={0x0, 0x72}, @generic="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", @typed={0x0, 0x41, @binary="b337e7cea6ef3501dbe16795a78b9e7515b3dbf864884d09dbaa10eb1c8bcbc4c761fb979ffb8cd1bf"}, @typed={0x0, 0x4d, @fd=r1}]}, @nested={0x0, 0x4, [@typed={0x0, 0x16}, @generic="de21baaa179d8bd4ffb2732d09791e24de62dbab82b00c8c88401519b0dbc832769e45838141d3abd89042a266a2b43ff028"]}]}, 0x14}, 0x1, 0xfdffffff00000000, 0x0, 0x20000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 10:58:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090417feb19a15c24bf40000ff3f0900000000000000000010141900040044000300000008000000e91ed838d2fd0000000100", 0x39}], 0x1) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, r1) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x0, 0x5}}, 0x20) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r3, r4}}, 0x18) 10:58:28 executing program 0: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x600b, 0x1) clone(0x2100001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='udf\x00', 0x0, 0x0) 10:58:28 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0xcf) r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create(0x6) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000001c0)=""/182) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) r2 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r1, r2, 0x0, 0x102002700) 10:58:28 executing program 2: mkdir(&(0x7f0000000780)='./file0\x00', 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000c80)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 10:58:28 executing program 3: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000080)="2235550c53c989df9c215b3787a82fd81c6ccd4d7879bcfb271574ab29e0bacc", 0x20) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x1d, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, r3, 0x0, 0xfffffd00, &(0x7f0000000140)='\x00', r4}, 0xffffffffffffff83) [ 166.838390] ip6tnl0: Invalid MTU 196676 requested, hw max 65407 [ 166.857949] audit: type=1400 audit(1561546708.467:39): avc: denied { create } for pid=7451 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 166.914092] ip6tnl0: Invalid MTU 196676 requested, hw max 65407 [ 166.915269] print_req_error: I/O error, dev loop1, sector 64 [ 166.934735] print_req_error: I/O error, dev loop1, sector 256 [ 166.941267] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 10:58:28 executing program 5: sync() r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1, 0x2, 0x0, "f097384eb0c167ae213764d723332e7f0bd474236a8a213fdbdba222c210bb19"}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2040, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") 10:58:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_int(r0, 0x29, 0x32, 0x0, 0x2e5) tkill(r2, 0x19) ptrace$setopts(0x4206, r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0xb262218c0733b6fa) [ 166.952291] audit: type=1400 audit(1561546708.557:40): avc: denied { write } for pid=7451 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 166.987503] hrtimer: interrupt took 36464 ns [ 167.007390] print_req_error: I/O error, dev loop1, sector 512 [ 167.013695] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 10:58:28 executing program 2: mkdir(&(0x7f0000000780)='./file0\x00', 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000c80)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 10:58:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x200000, 0x0) close(r0) r1 = socket$inet(0x2, 0x3, 0x7f) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x343, 0x0, 0x5, 0x9, 0x11, "b7f87f9fd7e49132f45d594450d1205185872721c636bd3ae300575d356c0b68cadf200481ee7435c549e7f85bf4e67e25427da402a8039294a771c47c02f339", "65592175dd3ec9c07a9c906d6a0485c5f60529c06af15abbc63befb48d8a7a923ba2e795aea55cc778eb8fe9c7da9bd7db568f293726aa4642ee531818fc5b8c", "b95b1558f7c54bc3d2791fee7621dd5c40272d8544da25c3d8901f3b87b32f97", [0x7ff, 0x6]}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x3000000b}) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0}}], 0x2, 0x0) [ 167.062335] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 167.084969] UDF-fs: Scanning with blocksize 512 failed [ 167.093969] print_req_error: I/O error, dev loop1, sector 64 10:58:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_int(r0, 0x29, 0x32, 0x0, 0x2e5) tkill(r2, 0x19) ptrace$setopts(0x4206, r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0xb262218c0733b6fa) [ 167.131735] print_req_error: I/O error, dev loop1, sector 512 [ 167.140258] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 10:58:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x202004}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_getneigh={0x40, 0x1e, 0xb00, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x400, 0x4010}, [@IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_LINKMODE={0x8, 0x11, 0x8}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffffffffffffffb}, @IFLA_PROTO_DOWN={0x8, 0x27, 0xfffffffffffffc01}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000005c0)=0xe8) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="3f0430655cccfd95616a833ce92ed6243a7444eaccc7b260430e498869368c6d1380ceb8a27dbf6657de6c051cb3922b1c86d8ed128f8c333bde339e5308e609f58f93badcee61eeb89010773c51303b4ba9da7f3f63c893b2655213074433c6c95e5e10715614012b3bc36ff28c8524b5f08983c03dd6cadde8be1e0a8bed30291408d613a23431d4c07fbb59ef95ee6df698a067d3e731e8d23a21f574ea04f3d188b83394bf49827cea3abf36e018bccbc068ad6aad9ef416f8e5b43046cbbed646b211206028f91a3c3728f5c2442187cc78", 0xd4, 0xd3a}, {&(0x7f0000000300)="1ff2df93965b9aeb4fe2905c0042ee10f61f0905fef019e4058431a8f272ba02130e40beac551faff2a9630e995bbadd9281474f403ee952d74624212d0f259b014ed6e88014094dae4f6fd87b431794425848fda732ad0a66efa3a3b0740c66b0f41f535a10a7ee01641dc2a71246e6d2e273ed5124f80548476039e597a0f0891809f1980f801a452f2859f1f0881df70ebe2de6ab1a4c0125ec47c68f34", 0x9f, 0xb013}], 0x80000, &(0x7f00000006c0)={[{@nls={'nls', 0x3d, 'maccyrillic'}}, {@errors_recover='errors=recover'}], [{@uid_eq={'uid', 0x3d, r2}}, {@uid_gt={'uid>', r3}}, {@euid_gt={'euid>', r4}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}) [ 167.178820] print_req_error: I/O error, dev loop1, sector 1024 [ 167.188588] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 10:58:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x10900) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000001480)) r1 = accept(r0, &(0x7f0000001340)=@isdn, &(0x7f00000013c0)=0x80) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000001400)={0xfffffffffffffff9, 0x40}) [ 167.246087] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found 10:58:28 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x62102) r1 = dup(r0) read(r0, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x40141042, 0x0) ftruncate(r2, 0x27fff) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r3, 0x1}, 0xc) sendfile(r1, r2, 0x0, 0x8000fffffffd) [ 167.288916] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 167.294902] UDF-fs: Scanning with blocksize 1024 failed [ 167.317637] print_req_error: I/O error, dev loop1, sector 64 [ 167.324168] print_req_error: I/O error, dev loop1, sector 1024 [ 167.343049] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 167.355746] mmap: syz-executor.1 (7502) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 167.363503] print_req_error: I/O error, dev loop1, sector 2048 [ 167.374635] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 167.383751] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 167.383758] UDF-fs: Scanning with blocksize 2048 failed [ 167.384060] print_req_error: I/O error, dev loop1, sector 64 [ 167.384340] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 167.413052] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 167.432748] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 167.442571] UDF-fs: Scanning with blocksize 4096 failed [ 167.451953] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 167.486263] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 167.539310] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 428.001730] INFO: task syz-executor.5:7482 blocked for more than 140 seconds. [ 428.009302] Not tainted 4.14.130 #24 [ 428.020178] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.028181] syz-executor.5 D29624 7482 7158 0x00000004 [ 428.038095] Call Trace: [ 428.041823] __schedule+0x7b8/0x1cd0 [ 428.045561] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.058333] ? _raw_spin_unlock_irq+0x28/0x90 [ 428.063695] schedule+0x92/0x1c0 [ 428.067083] rwsem_down_read_failed+0x1f6/0x390 [ 428.075908] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 428.082965] ? dquot_writeback_dquots+0x38a/0x590 [ 428.087831] ? iterate_supers+0xd9/0x250 [ 428.096076] call_rwsem_down_read_failed+0x18/0x30 [ 428.101861] down_read+0x49/0xb0 [ 428.105246] ? iterate_supers+0xe1/0x250 [ 428.109306] iterate_supers+0xe1/0x250 [ 428.117470] ? do_fsync+0x80/0x80 [ 428.121773] sys_sync+0x8a/0x130 [ 428.125155] ? sync_filesystem+0x230/0x230 [ 428.136044] ? do_syscall_64+0x53/0x640 [ 428.141610] ? trace_hardirqs_on_caller+0x400/0x590 [ 428.146659] ? sync_filesystem+0x230/0x230 [ 428.155127] do_syscall_64+0x1e8/0x640 [ 428.159045] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.165181] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.174368] RIP: 0033:0x459519 [ 428.177564] RSP: 002b:00007f7d44e85c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 428.186405] RAX: ffffffffffffffda RBX: 000000000075bf28 RCX: 0000000000459519 [ 428.197561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.206062] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 428.217325] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d44e866d4 [ 428.225763] R13: 00000000004c5f90 R14: 00000000004dec00 R15: 00000000ffffffff [ 428.236941] INFO: task syz-executor.5:7485 blocked for more than 140 seconds. [ 428.247017] Not tainted 4.14.130 #24 [ 428.255204] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.264410] syz-executor.5 D27712 7485 7158 0x00000004 [ 428.274812] Call Trace: [ 428.277436] __schedule+0x7b8/0x1cd0 [ 428.282395] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.287426] ? _raw_spin_unlock_irq+0x28/0x90 [ 428.296132] schedule+0x92/0x1c0 [ 428.299524] rwsem_down_read_failed+0x1f6/0x390 [ 428.305329] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 428.315369] ? iterate_supers+0xd9/0x250 [ 428.319457] call_rwsem_down_read_failed+0x18/0x30 [ 428.325774] down_read+0x49/0xb0 [ 428.329155] ? iterate_supers+0xe1/0x250 [ 428.337417] iterate_supers+0xe1/0x250 [ 428.342226] ? SyS_tee+0x950/0x950 [ 428.345777] sys_sync+0x7a/0x130 [ 428.349143] ? sync_filesystem+0x230/0x230 [ 428.357724] ? do_syscall_64+0x53/0x640 [ 428.362592] ? trace_hardirqs_on_caller+0x400/0x590 [ 428.367739] ? sync_filesystem+0x230/0x230 [ 428.376213] do_syscall_64+0x1e8/0x640 [ 428.380939] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.385800] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.395225] RIP: 0033:0x459519 [ 428.398431] RSP: 002b:00007f7d44e64c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 428.407941] RAX: ffffffffffffffda RBX: 000000000075bfd0 RCX: 0000000000459519 [ 428.419093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.427604] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 428.438807] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d44e656d4 [ 428.447213] R13: 00000000004c5f90 R14: 00000000004dec00 R15: 00000000ffffffff [ 428.458351] [ 428.458351] Showing all locks held in the system: [ 428.465806] 1 lock held by khungtaskd/1009: [ 428.470333] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 428.479415] 1 lock held by rsyslogd/6991: [ 428.483627] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0xab/0xd0 [ 428.491926] 2 locks held by getty/7113: [ 428.495995] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.504725] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.514181] 2 locks held by getty/7114: [ 428.518153] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.526904] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.536280] 2 locks held by getty/7115: [ 428.540282] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.548976] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.558467] 2 locks held by getty/7116: [ 428.562479] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.571232] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.580586] 2 locks held by getty/7117: [ 428.584559] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.593311] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.602686] 2 locks held by getty/7118: [ 428.606667] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.615433] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.624788] 2 locks held by getty/7119: [ 428.628762] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.637538] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.646927] 1 lock held by syz-executor.5/7482: [ 428.651663] #0: (&type->s_umount_key#58){++++}, at: [] iterate_supers+0xe1/0x250 [ 428.661095] 1 lock held by syz-executor.5/7485: [ 428.665785] #0: (&type->s_umount_key#58){++++}, at: [] iterate_supers+0xe1/0x250 [ 428.675158] [ 428.676824] ============================================= [ 428.676824] [ 428.684547] NMI backtrace for cpu 0 [ 428.688190] CPU: 0 PID: 1009 Comm: khungtaskd Not tainted 4.14.130 #24 [ 428.694853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.704208] Call Trace: [ 428.706809] dump_stack+0x138/0x19c [ 428.710446] nmi_cpu_backtrace.cold+0x57/0x94 [ 428.715076] ? irq_force_complete_move.cold+0x7d/0x7d [ 428.720277] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 428.725568] arch_trigger_cpumask_backtrace+0x14/0x20 [ 428.730790] watchdog+0x5e7/0xb90 [ 428.734368] kthread+0x319/0x430 [ 428.737738] ? hungtask_pm_notify+0x50/0x50 [ 428.742062] ? kthread_create_on_node+0xd0/0xd0 [ 428.746741] ret_from_fork+0x24/0x30 [ 428.750526] Sending NMI from CPU 0 to CPUs 1: [ 428.755597] NMI backtrace for cpu 1 [ 428.755602] CPU: 1 PID: 7471 Comm: syz-executor.0 Not tainted 4.14.130 #24 [ 428.755606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.755609] task: ffff88808f41a6c0 task.stack: ffff888060868000 [ 428.755612] RIP: 0010:__sanitizer_cov_trace_pc+0x23/0x60 [ 428.755615] RSP: 0000:ffff88806086f630 EFLAGS: 00000246 [ 428.755620] RAX: ffff88808f41a6c0 RBX: ffffea000228cf80 RCX: ffffc9000603e000 [ 428.755624] RDX: 0000000000000001 RSI: ffffffff816fc104 RDI: 0000000000000286 [ 428.755627] RBP: ffff88806086f690 R08: 0000000000000000 R09: ffff88808f41af88 [ 428.755631] R10: ffff88808f41af68 R11: ffff88808f41a6c0 R12: ffff8880736bb8b0 [ 428.755634] R13: ffffea000228cf9c R14: dffffc0000000000 R15: ffffea000228cf80 [ 428.755638] FS: 00007f2477421700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 428.755641] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.755644] CR2: 00007f14cc3e9140 CR3: 0000000098af1000 CR4: 00000000001406e0 [ 428.755648] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 428.755651] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 428.755653] Call Trace: [ 428.755656] ? find_get_entry+0x155/0x520 [ 428.755658] pagecache_get_page+0x4a/0x750 [ 428.755661] __find_get_block+0x455/0xb10 [ 428.755663] ? I_BDEV+0xd/0x20 [ 428.755665] __getblk_gfp+0x18b/0x710 [ 428.755668] ? _udf_err+0xc9/0xe5 [ 428.755670] __bread_gfp+0x2e/0x290 [ 428.755673] udf_tread+0xe8/0x130 [ 428.755675] udf_read_tagged+0x40/0x4b0 [ 428.755678] udf_check_anchor_block+0x19b/0x580 [ 428.755681] ? blkdev_ioctl+0x108/0x1860 [ 428.755683] ? udf_process_sequence+0x37d0/0x37d0 [ 428.755686] ? __lock_is_held+0xb6/0x140 [ 428.755688] udf_scan_anchors+0x352/0x5a0 [ 428.755691] ? udf_check_anchor_block+0x580/0x580 [ 428.755693] ? udf_get_last_session+0xe0/0xe0 [ 428.755696] ? udf_tread+0xf0/0x130 [ 428.755698] udf_load_vrs+0x5c4/0xae0 [ 428.755700] ? udf_scan_anchors+0x5a0/0x5a0 [ 428.755702] ? udf_bread+0x1f0/0x1f0 [ 428.755705] ? lockdep_init_map+0x9/0x10 [ 428.755707] udf_fill_super+0x727/0x157f [ 428.755710] ? udf_load_vrs+0xae0/0xae0 [ 428.755712] ? snprintf+0xa5/0xd0 [ 428.755714] ? vsprintf+0x40/0x40 [ 428.755717] mount_bdev+0x2be/0x370 [ 428.755719] ? udf_load_vrs+0xae0/0xae0 [ 428.755722] udf_mount+0x35/0x40 [ 428.755724] mount_fs+0x97/0x2a1 [ 428.755726] vfs_kern_mount.part.0+0x5e/0x3d0 [ 428.755729] do_mount+0x417/0x27d0 [ 428.755731] ? copy_mount_string+0x40/0x40 [ 428.755734] ? memdup_user+0x58/0xa0 [ 428.755737] ? copy_mount_options+0x1fe/0x2f0 [ 428.755739] SyS_mount+0xab/0x120 [ 428.755741] ? copy_mnt_ns+0x8c0/0x8c0 [ 428.755744] do_syscall_64+0x1e8/0x640 [ 428.755747] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.755749] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.755752] RIP: 0033:0x459519 [ 428.755754] RSP: 002b:00007f2477420c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 428.755760] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459519 [ 428.755764] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000020000200 [ 428.755767] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 428.755771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f24774216d4 [ 428.755774] R13: 00000000004c595e R14: 00000000004d9fe0 R15: 00000000ffffffff [ 428.755776] Code: 00 00 00 e9 2f ec ff ff 65 48 8b 04 25 40 ee 01 00 48 85 c0 74 1a 65 8b 15 3b 46 a5 7e 81 e2 00 01 1f 00 75 0b 8b 90 c8 12 00 00 <83> fa 01 74 01 c3 55 48 89 e5 48 8b 75 08 48 8b 88 d0 12 00 00 [ 428.756038] Kernel panic - not syncing: hung_task: blocked tasks [ 429.104395] CPU: 0 PID: 1009 Comm: khungtaskd Not tainted 4.14.130 #24 [ 429.111067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.120424] Call Trace: [ 429.123021] dump_stack+0x138/0x19c [ 429.126678] panic+0x1f2/0x426 [ 429.129907] ? add_taint.cold+0x16/0x16 [ 429.133894] ? irq_force_complete_move.cold+0x7d/0x7d [ 429.139127] watchdog+0x5f8/0xb90 [ 429.142595] kthread+0x319/0x430 [ 429.145959] ? hungtask_pm_notify+0x50/0x50 [ 429.150280] ? kthread_create_on_node+0xd0/0xd0 [ 429.154955] ret_from_fork+0x24/0x30 [ 429.160676] Kernel Offset: disabled [ 429.164349] Rebooting in 86400 seconds..